Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
File: 3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa (raw, json)
Hash identifier: SdpZ46C4KVBb8vpFYQHm3+Wsnmgyz5PBrR38ZqGomVw=
Subject key identifier: 96:28:FB:37:1E:51:76:56:7B:41:0A:F6:A2:0D:03:9F:C4:5F:66:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72376EE2A89440EA28CF3285CE273EC78AAE4AF4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
Signing time: Fri 07 Aug 2026 05:20:41 +0000
ROA not before: Fri 07 Aug 2026 05:20:41 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:37:6e:e2:a8:94:40:ea:28:cf:32:85:ce:27:3e:c7:8a:ae:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:41 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=18e715937155088f9d54262d03ea7f452cd6759a2d8d2bf4be52d7c1b18b9464, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:0c:14:5a:cd:e3:f7:3c:a7:5a:bc:72:2d:
cb:e3:93:1b:52:5c:ae:3a:fd:f3:0e:f5:59:4d:3b:
66:b6:ae:98:b3:67:91:5a:45:e9:40:58:63:22:04:
f5:b1:8a:de:db:97:ae:ed:6c:2a:4f:82:35:06:9b:
6d:2b:76:3c:be:2f:ac:14:34:58:9b:97:d4:47:ee:
b1:3f:fb:87:0e:0a:37:22:d0:aa:cf:66:2b:dc:70:
de:dc:ab:8f:75:bf:a2:bf:28:90:cf:8d:2c:8d:23:
ce:ad:55:ac:53:98:46:5d:b0:0b:e4:06:7e:76:36:
40:3b:d8:fa:c0:22:03:6e:ee:33:08:1b:48:45:73:
fc:4a:04:4f:bb:10:40:eb:3d:77:96:4a:97:78:9b:
1f:ad:2d:96:89:f3:0a:c9:5c:e1:55:c3:0e:a8:fa:
23:72:e0:56:64:b5:26:53:4b:3a:55:18:f8:4b:76:
06:4a:55:90:cd:e0:d3:2d:4c:8f:cc:cf:71:c3:0d:
97:18:b1:8b:c8:9a:66:04:6a:41:79:cb:af:d3:57:
2b:4b:54:19:76:38:82:44:e4:85:a9:b9:18:15:01:
a8:22:28:32:71:33:c3:be:f3:84:62:79:b1:bb:bf:
9d:56:0b:4a:16:9b:cc:73:a6:c0:55:86:6a:53:8b:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:28:FB:37:1E:51:76:56:7B:41:0A:F6:A2:0D:03:9F:C4:5F:66:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036::/32
Signature Algorithm: sha256WithRSAEncryption
6c:f8:62:35:50:ca:e6:9d:c2:94:f5:fb:7f:7e:8f:46:62:77:
1b:38:77:7b:dc:a0:b0:9d:b6:75:50:06:c5:11:90:6a:ea:71:
f7:41:67:cf:b5:73:98:fc:cc:a9:c8:5d:49:41:3f:41:5c:b2:
ce:17:18:28:14:62:2e:fc:aa:71:09:73:88:9a:53:73:be:5c:
9f:fb:80:d4:9f:0c:03:4b:64:a8:88:6a:e1:7a:62:e8:3f:4d:
35:b1:8e:5e:04:65:40:5d:dd:cb:a1:dc:b7:d8:09:2a:86:ad:
db:78:8b:62:3d:ab:d7:f5:04:1f:ef:50:3c:07:17:35:4b:82:
4c:5f:cb:69:8a:4a:76:ed:34:d1:58:ae:23:b8:ba:34:5a:77:
da:39:94:ea:9a:3e:a6:f1:90:48:34:b6:c5:87:e0:49:12:34:
6e:b2:9b:2a:c4:62:3d:35:4e:f5:98:ed:a4:ac:d9:6b:56:01:
74:a3:71:de:e6:a4:c5:1b:c2:fd:80:f9:8f:56:9a:92:97:bd:
62:74:7b:02:64:93:5e:f5:d0:d0:c9:e1:fd:74:a8:2f:9c:e5:
0c:ff:56:6c:bb:ec:fd:b9:94:f2:f0:71:a4:66:0b:40:d7:de:
a4:a3:6a:55:66:cc:f4:8c:91:43:50:51:87:5e:de:05:00:62:
35:e0:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:02 2026 by rpki-client